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(54) FINGERPRINT-BASED ACCESS CONTROL 
AND IDENTIFICATION APPARATUS 



. , We, Calspan Corporation, a 
corporation of the State of Ohio having its 
offices at 4455 Genesee Street, Buffalo, New 
York 14225, United States of America, do 
hereby declare the invention, for which we 
pray that a patent may be granted to us, and 
the method by which it is to be performed, to 
be particularly described in and by the follow- 
ing statement: — 

The present invention relates to a fingerprint 
identification system capable of converting 
ridge -valley patterns of a fingerprint into 
electronic binary signals for image processing by 
locating and extracting distinctive minutiae or 
characteristics of the fingerprint. The identifica- 
tion system is intended for use where positive 
identification of an individual is essential, as 
where restricted entry to a facility, for example, 
is intended only for security cleared personnel. 

Increasing security problems are becoming a 
noticeable part of modern life; security was 
once primarily the preserve of classified govern- 
ment installations, but increasing losses and cal- 
amities have forced the review of security equip- 
ment and procedures by government and indus- 
try. Cargo losses and the theft of corporate 
secrets cost industry billions of dollars annually. 
Public safety is endangered by the ability of 
intruders to plant bombs in places such as air- 
craft and buildings. Computerized records and 
even the computers themselves, are attacked and 
destroyed. 

Access control and personnel identification 
are becoming tremendous problems, and will be 
the object of significant expenditures by organi- 
zations needing to identify employees, vendors, 
etc., who are to be allowed access to plants, 
computer rooms, vaults, baggage areas, etc. The 
ultimate method of personal identification is 
not a card which can be lost, loaned or stolen, 
nor a number code which can be told or pur- 
loined; but an unchangeable, non-transferable 
and indisputably unique characteristic of the 
person himself, his fingerprint. 

With the foregoing in mind we provide in * 



accordance with the invention a fingerprint 
identification system capable of converting 
ridge-valley patterns of a fingerprint into 
electronic binary signals for image processing 
by locating and extracting distinctive minutiae 50 
or characteristics of a fingerprint, characterized 
by terminal means at a "local" station supplying 
identification data relevant to an individual to 
be identified and sensing and converting a finger- 
print pattern at a "local" station into said 55 
electronic binary signals for transmission of 
such signals to a multiplexer at a "central" 
station and for receipt of data from said multi- 
plexer, and a data processor at the "central" 
station operatively connected to said multi- 60 
plexer to receive therefrom and to transmit 
thereto, and thereby to said terminal means via 
said telecommunication means, data pertinent 
to the identification of an individual, said pro- 
cessor being associated for this purpose with a 65 
data-store which stores identity and minutiae 
data for different individuals, said processor 
extracting minutiae from the binary signals 
supplied by said terminal means and matching 
the extracted minutiae and identification data 70 
supplied by the terminal means with identity 
and minutiae data stored in said data store to 
determine whether the identity is confirmed 
and for transmitting, by way of said multi- 
plexer, the determination to said terminal means, 75 
said identity determination being effected as a 
function of a single scan of the fingerprint 
pattern by scanning means forming part of the 
terminal means. 

With the system of the invention a limited 80 
access to physical space, information, services, 
etc. is insured by identifying the individuals 
having authorized access through their finger- 
prints. Once the system determines that the 
individual's fingerprint characteristics match 85 
with the characteristics on file for the alleged 
(keyed-in) identity number, and if that identity 
is authorized access under the registered condi- 
tions, then an affirmative action such as opening 
a door or unlocking a computer terminal may 90 



bjj taken.. For purpose of identification, the 
individual may approach the identification ter- 
minal and insert a card or key in a number as 
identification of who he alleges to be. Then the 
5 individual puts a designated finger onto the sur- 
face of a fingerprint reader which scans the fin- 
gerprint and transmits an enhanced representa- 
tion of the image to a "central system" com- 
puter. 

0 At the centrai station, the fingerprint data is 
processed, as indicated, in order to determine 
its minutiae characteristics (ridge endings and 
ridge bifurcations) and a comparison is made 
against the minutiae characteristics on file in the 

5 data store for the alleged identity. Other infor- 
mation on file for the individual may include 
data on what areas, terminals or doors he has 
access to, time periods of access, and/or other 
control information. A signal is returned to the 
terminal means designating if he is allowed 
access, or asking for another reading if no match 
is made. Subsequent unsuccessful attempts may 
result in an alarm or other remedial action. 

A number of advantages are offered by the 
use of the present invention. Positive identifica- 
tion of a person, rather than a card, is made 
through the person's fingerprints which are the 
only widely accepted form of personal identifica- 
tion. No inked impression is taken since there is 
a direct reading and digitizing of minutiae. Since 
a card identification is not essential the system 
is secure and the response time can be on the 
order of 2 seconds. Additionally, the system 
offers an individualized access list including per- 
missible access time for each terminal or portal, 
provides a data log of personnel activity and 
requires no additional or special equipment for 
encoding new personnel into the file since 
standard terminals are used. There may be inclu- 
ded a central control and monitoring of security 
and a selectable response to attempts at defeat- 
ing the system. 

The system of the present invention may be 
adapted to a number of installations each having 
their specific requirements. A system may have 
a single terminal or many, and the terminals 
may be proximate to the centralized equipment 
or remote from it. The reference to "local and 
"remote" stations in the appended claims is 
not intended to preclude the possibility of the 
terminal means being proximate to the central- 
ized equipment. Transmission from the termi- 
nals to the central system may be through a 
direct wire, telephone, or other data transmission 
system. The system may be constructed so as 
to monitor an unlimited number of persons, 
and the response time of the system will depend 
upon the number of terminals used and their 
total inquiry rate and whether or not telephone 
line transmission or other low bandwidth 
communication lines are required. 

Typical access control applications for the 
system of the invention may include: computer 
centers; radioactive or biological danger areas: 
controlled experiments; information storage 



areas; airport maintenance and freight areas; 
hospital closed areas and drug storage areas;' 
apartment houses and office buildings after* 
hours; safe deposit boxes and vaults; and com- 
puter terminal entry and access to information. 70 

In a typical secured installation there are a 
limited number of points of entry. In adapting 
the present invention to such an installation, a 
terminal will be located at each access site to 
the installation as well as at the access to any 75 
more secure areas within the installation. Each 
terminal will accept the individual's identifica- 
tion and his fingertip for scanning and will 
include a means for unlocking a door, activating 
a one-person-at-a-time turnstile or similar entry 80 
device once the computer has determined a 
match for an authorized inquiry. These remote 
terminals will be connected to the central com- 
puter system by means of a direct cable of 
twisted pair wiring or the equivalent. The cen- 85 
tral equipment will be located in a more secure 
location within the facility and includes the 
multiplexer and the data processor; i.e. a com- 
puter which will do some of the detection and 
all of the minutiae location and matching func- 90 
tions, the central equipment including, if 
desired, a preprocessor to do parallel image 
processing operations. If desired, the computer 
may be directed to give an alarm if there are 
abnormal patterns of ingress and egress. Disk 95 
files coupled to the computer will hold data on 
any desired number of individuals. 

In addition to uses of the system of the in- 
vention outlined above, the system can also be 
used in place of a time clock, thereby eliminat- 100 
ing punching in by proxy. Similarly the system 
could verify the validity and identity of every 
person attempting to vote. Since the central 
processing portion of the system also contains 
computing and data storage capability, time-in 105 
or voting information can be tallied, processed, 
and stored for further use or displayed. The 
accuracy of identity verification of which the 
system is capable makes it ideal for money 
dispensing systems, or applications such as mass 110 
transit ticket systems, where a passenger pre- 
pays a given amount and then the price of his 
ride is deducted from his account each time he 
uses the system. Since it is the individual which 
is recognized, not a card or ticket, forgery and 115 
black markets in reduced-rate fares can be 
eliminated. In such a system, the terminals 
would tend to be many and spread over a large 
geographical area. Thus, terminal data trans- 
mission would most likely to over existing tele- 120 
phone lines using modems, i.e. modulators and 
demodulators. 

For a fuller understanding of the present 
invention, reference should now be had to the 
following detailed description of embodiments 125 
taken in conjunction with the accompanying 
drawings wherein: 

Figure 1 is a functional block diagram of the 
system of this invention; 

Figure 2 is a block diagram of a terminal 130 



employing a 1— axis scanner; 

Figure 3 is a block diagram of a terminal 
employing a 2— axis scanner; and 

Figure 4 is a functional block diagram of the 
5 preprocessor. 

The present invention is best shown in Figure 
1 wherein the numeral 10 generally designates 
the system. The system 10 consists of one or 
more terminals of which four have been illustra- 
10 ted and are designated 12a, 12b, 12c and 1 2d, 
respectively. Terminals 12a, 12b, 12c and 1 2d 
are connected to data multiplexer 16 in the 
central station via communication lines 14a, 1 4b, 
14c and 14d, respectively. If the terminals are 
1 5 spread over a large geographic area, the comm- 
unication lines may advantageously take the 
form of telephone lines. The data multiplexer 
16 sends fingerprint data from one terminal at 
a time to a preprocessor 20, also at the central 
20 station, via line 18 and sends identity label in- 
formation to data processor 24 which may take 
the form of a computer, via line 30. Preprocessor 
20 in turn sends the preprocessed data to pro- 
cessor 24 via line 22. Processor 24 is also conn- 
25 ected to data store 26 via line 25 for final pro- 
cessing prior to identity verification and action 
to determine the access conditions, if any, 
associated with the individual seeking access to 
a facility when unauthorized entry is to be 
30 guarded against. An action signal, which may 
cause the opening of a door or the like, is sent 
to an appropriate device (not illustrated) via 
lines 32a, 32b, 32c and 32d. As illustrated, the 
action signal is sent from processor 24 via line 
35 30 to multiplexer 16 and via the appropriate 
communication line to the terminal which 
requested the identity verification, however, 
the action signal can, in appropriate devices, 
take some other path from the processor 24 to 
**0 an appropriate device. 

. The operation of the system of Figure 1 
would be as follows: an individual who wishes 
to have his identity verified would enter his 
alleged numeric identity label via a keyboard or 
^ 5 card reader on any one of the terminals, e.g. 12a, 
of the system 10 and would then press the tip 
of a finger, specified in advance, against the 
reading window of the terminal 12a. Terminal 
12a scans the fingerprint and sends the identity 
>u label and a version of the fingerprint on which 
some electronic signal processing has been per- 
formed to accomplish image enhancement to 
multiplexer 16 via communication line 14a. The 
multiplexer 16 communicates with only one 
)5 terminal at a time and leaves any other terminals 
on "hold" until communication with the one 
terminal has ended. The multiplexer 16 comm- 
unicates the alleged identity label to processor 
24 via line 30, and processor 24 retrieves the 
,0 fingerprint minutiae data for that particular 
person as well as any access conditions associat- 
ed with his identity from data store 26 via line 
25. Multiplexer 16 also communicates the pro- 
cessed fingerprint data to preprocessor 20 
which extracts all tentative minutiae from it 



and transmits these tentative minutiae to pro- 
cessor 24 via line 22. Processor 24 further pro- 
cesses the tentative minutiae to extract true 
minutiae which are then compared with the 
minutiae on file for the given identity label to 70 
check for a match. Depending upon whether a 
match is declared or not and conditioned by 
the control data in the data store associated 
with the individual whose identity is to be 
verified, an action signal is sent back to the 75 
terminal 12a by processor 24 via line 30, multi- 
plexer 16 and line 14a. This signal is the ulti- 
mate result of the whole process and is supplied 
to line 32a by terminal 12a and can be used to 
allow access to a secure area, dispense money, 80 
operate an elevator, allow a ride on a public 
vehicle, etc. 

Identity data and minutiae data may be 
added or deleted from the data store 26 
through the intermediary of a keyboard 34 85 
which sends a "create file" code to processor 24 
through keyboard 34 via line 33, the processor 
in such event transmitting the individual's 
identity data and minutiae data therein, as deter- 
mined by the label identification and the finger 90 
scan of the individual at one of the terminals, 
to data store 26 via line 25 for storage. If the' 
processor 24 receives an identity number from 
multiplexer 16 and a "delete file" code from 
keyboard 34 via line 33, it transmits data to the 95 
data store 26 over lines 25 to overwrite (erase) 
the identity data and minutiae data which apply 
to the individual person. 

As outlined above, it is apparent that the 
system consists of five elements one of which, 100 
the terminals (12a, 12b, 12c and 1 2d) constitut- 
ing the "local" station and the other faces of 
which the "central" station, namely the comm- 
unications (14a, 14b, 14c and 14d) and multi- 
plexing (1 6); the preprocessor (20); the pro- 105 
cessor (24); and the data store (26). These ele- 
ments will be described in greater detail below. 
Terminal 

The terminals (12a, 12b, 12c and 1 2d) have 
five major functions: (1) to read the fingerprint 110 
from a finger placed on the terminal window 
and present a clean, well-formed binary image of 
that fingerprint for further processing; (2) to 
provide the mechanism for quickly and accurate- 
ly accepting the alleged identity label of an indi- 115 
vidual requesting identity verification; (3) to 
provide the means for transmitting the finger- 
print binary image and the identity label and 
for receiving the action signal over the comm- 
unications system; (4) to provide the means for 120 
displaying the states of the terminal and the res- 
ponse from the central processor; and, (5) to 
provide the means for transmitting the action 
signal to the action device (if such device is 
located near the terminal). 125 

One of the basic problems in reading finger- 
prints directly is that the ridges and valleys 
exhibit poor contrast. In order to produce a 
good-image, the terminals employ an enhance- 
ment technique based on the optical phenom- 13 0 



ehon of tbtal internal rellection as applied to a 

prism. Light propagating in a prism can be both 

reflected and refracted at a glass/air boundary 

and the angles of incidence and refraction and 

5 the indices of refraction are related by Snell's . 

law: . rt . rt 

t\i sin 0i = n 2 sin 02 

However, there is some critical angle of inci- 
dence 0i for which 0j = 90°. Above this angle, 

10 which is about 42° for air and typical composi- 
tions of glass, only reflection takes place. 

When a finger is placed on the prism surface 
only the ridges actually make contact with the 
glass and air pockets are left in the valleys. Thus 

15 light incident at the proper angle under the 
valleys is reflected, while light striking at the 
ridges will be absorbed in the relatively dense 
medium of the finger. Sharp images with excell- 
ent contrast can be obtained in this fashion. 

20 As shown in Figure 2, the terminal 12a has 
a fingerprint scanning window defined by one 
face 1 1 la of prism 111 for scanning the tip of 
the finger F, a keyboard 1 12 for entering an 
identity label, and a plurality of indicators such 

25 as 1 14-1 17 for indicating: if the terminal is 
active and available for identity verification; 
if the identity label is being verified; if a finger 
should be placed on the terminal for scanning 
or rescanning; and if the requested identity has 

30 been verified or rejected. Light from the pre- 
focused lamp 120 is passed through condenser 
lenses 122 and is directed through face 111b 
of the object prism 111. Normally this light is 
all. reflected inside the prism 1 1 1 and passes on 

35 out through face 111c. However, when a subject 
has placed his finger F on the scanning window 
defined by face 111a, this reflection is frustrated 
along the ridges, resulting in a high-contrast 
black and white pattern. The image is then 

**0 reflected off the vertical scanning mirror 124 
and passed through a multi-element objective 
lens 1 26 which focuses this image onto hori- 
zontally extending photodetector array 137 and 
is converted to an electronic television-like 

45 raster image by the combination of mechanical 
and electronic scanning under the control of 
timing and control signal circuits 154. 

The identity label information is generated 
by keystrokes on keyboard 112 and this data is 

50 stored in a shift register 140 and shifted out a 
character at a time to initiate a verification 
operation. For communication over the tele- 
phone linesi the data to be transmitted to the 
multiplexer 16 at the "central" station is en- 

55 coded within the terminal 12a in character-like 
blocks of bits by message coder/decoder 142 for 
transmission by a modem (not illustrated) via 
line 14a. The data to be received by the terminal 
1 2a via line 14a from the modem is decoded 
60 from character-like blocks of bits by message 
coder/decoder 142. If terminal 12a is wire 
connected to the processor 24 as the "central" 
station, line drivers and receivers for the twisted 
pair (not illustrated) would be included in the 
65 terminal 12a. If the requested identity has been 



verified, the terminal 12a receives a signal from 
processor 24. The terminal 12a, upon the decod- 
ing of the signal by message coder/decoder 142 
then makes available to the action device (not 
illustrated) an action signal via line 143, relay 70 
closure activator 144 and line 32a. 
O peration 

Indicator 1 14 is connected to timing and con- 
trol signal circuits 154 of terminal 12a via line 
1 19 and indicates that terminal 12a is in the 75 
ready state. The person to be identified enters 
the pertinent identification data on keyboard 
112 which transmits the data to shift register 
140 which contains a conventional digital elec- 
tronic shift register circuit. Shift register 140 80 
stores the data transmitted by keyboard 1 12 and 
shifts it out one character at a time via line 158 
to timing and control signal circuits 154. Timing 
and control signal circuits 154 contain conven- 
tional electronic pulse generators, gating logic 85 
circuits and register circuits and transmit the 
identification data received from shift register 
140 to message coder/decoder 142 via line 156. 
The message coder/decoder 142 contains con- 
ventional digital electronic logic circuits and 90 
encodes the keyed-in identification data received 
from timing and control signal circuits 1 54 for 
transmission via line 14a to multiplexer 16 and 
by line 30 to processor 24 to determine if the 
identity exists in data store 26. Additionally, 95 
timing and control signal circuits 154 thereupon 
activate indicator 1 15 via line 119. In response 
to indicator 115, the person to be identified 
places his previously designated finger F on. face 

I I la of prism 111. The correct placing of finger 100 
F on prism face Ilia causes finger F to contact 
electrodes 101 and 102 and causes the light 

which has passed from normally-on, pre-focused 
lamp J 20 through condenser lenses 122 and 
prism face 1 1 lb, to be only partially reflected 105 
due to the presence of the ridges of the finger 
F which are in contact with prism face 111a. The 
reflected light containing a high-contrast black 
and white pattern of the fingerprint passes 
through prism face 1 1 lc, is reflected by vertical 1 10 
scanning mirror 124 and passes through multi- 
element objective lens 1 26 which focuses the 
image on the horizontally extending photodetec- 
tor array 137, which may be a RL— 128 series 
solid state linear scanner manufactured by 115 
Reticon Corporation of Mountain View, 
California, produces an output indicative of the 
pattern of light incident thereon. The output of 
photodetector array 137 is transmitted via line 
149 to video signal processing circuits 1 50 120 
which includes amplifiers, peak detectors and a 
sample and hold circuit. Signals from electrodes 
101 and 102 which are located on prism face 

I I I a of prism I 1 1 are used to detect the 
presence of finger F in the correct position for a 
scan to start. These signals are amplified by 
amplifiers 104 and 105 which are located in 
lines 107 and 108, respectively, and these ampli- 
fied signals are used by timing and control sig- 
nal circuits 154 which in turn send a signal via 



line 156, message coder/decoder 142, line 14a, 
multiplexer 16 and line 30 to processor 24 to a 
signal that finger F is in position. An initiation 
signal determined by a frame counter 176 is 
5 returned to timing and control signal circuits 
154 which through a combination of control 
and feedback signals synchronizes the operation 
of the elements making up terminal 1 2a. Because 
the horizontally extending photodetector array 
10 senses a single line of the fingerprint image, the 
image must be moved across the photodetector 
array. Movement of the fingerprint image is 
accomplished by synchronous motor 130 which 
starts when the command to start is received 
15 from processor 24 and is transmitted to motor 
130 via line 160 by timing and control signal 
circuits 154. Motor 130 is mechanically connect- 
ed through a pulley, belt, gear train or other 
suitable connection to drive cam 134 and there- 
20 by causes the movement of mirror 1 24 which is 
mounted on pivoted member 136 which is 
in engagement with cam 134. The output of 
photodetector array 137, which is a series of 
negative-going pulses of amplitude proportional 
lb to the amount of incident light, is fed into video 
signal processing circuits 150. Video signal pro- 
cessing circuits 150 supply a first output signal 
to timing and control signal circuits 154 via 
line 152 and a second output signal, which is 
a continuous video signal, to threshold circuits 
162 via line 161. Threshold circuits 162 includes 
conventional comparator circuits and a high- 
pass filter that removes any offset from the 
video and turns it, in effect, into an alternating 
current signal. Positive excursions (ridges) and 
negative excursions (valleys) are distinguished 
by threshold circuits 162, the output signal 
from which is clocked into one-bit buffer 164 
at the trailing end of the sample pulse as a 
■ w binary signal into which the fingerprint scanned 
has been converted. A synchronous control sig- 
nal is supplied to one-bit buffer 164 via line 166 
by timing and control signal circuits 154 and in 
response thereto initiates transmission and con- 
45 tinues to transmit the binary signal to message 
coder/decoder 142 via line 168, for transmission 
via line 14a, multiplexer 16 and via lines 18 and 
30 to preprocessor 20 and processor 24, respect- 
ively, until completion of a fingerprint scan, in 
^ the disclosed embodiment constituting 128 lines 
More specifically, in response to the output sig- 
nal supplied via line 152 to timing and control 
signal circuits 154, timing and control signal 
circuits 154 supply an output signal via line 170 
to 9-bit line counter 1 72 which includes conven- 
tional digital electronic counter circuits. The 
seven high order bits supplied to counter 172 
are used to count up the 128 points that make 
ah u . p a fin g er P rint line and supplies an end-of-Iine 
signal as an input to frame counter 1 76 via line 
1 73 and via lines 1 73 and 1 74 as a feedback sig- 
nal to timing and control signal circuits 154. 
Frame counter 1 76 which includes convention- 
65 al digital electronic counter circuits counts up 
to the 1 28 lines that make up a complete scan. 



At that point an end-of-frame signal is fed back 
to timing and control circuits 154 via line 178 
to stop the motor 130, and constitutes the 
synchronous control signal fed via line 166 to 
one bit buffer, until the next start pulse is 70 
received. Thereby the scanning of the finger- 
print may be synchronized for comparison 
with the stored fingerprint in the data bank in 
the "central" station. When all of the identity 
information has been transmitted to preprocess- 75 
or 20 and processor 24 and the identity has been 
verified or challenged an appropriate signal will 
be transmitted by processor 24 via line 30 
multiplexer 16, and communication line 14a to 
message coder/decoder 142 of terminal 12a. If 80 
the identity has been verified, the message coder/ 
- decoder 142 will transmit a signal via line 143 
to relay closure activator 144. Relay closure 
activator 144 which is a conventional solid- 
state or mechanical relay will transmit an action 85 
signal via line 32a to open a door, etc. in response 
to the signal supplied via line 143. Message 
coder/decoder 142 transmits the identify veri- 
fication or challenge information to timing and 
control signal circuits 1 54 which sends a signal 90 
via line 1 19 to actuate indicator 1 1 7 if the 
identification is verified, or to actuate indicator 
1 16 if the identity is challenged. If the identity 
is challenged a second scanning of the finger- 
print and entry of identification may be . 95 
required before an alarm or other appropriate 
action is taken; otherwise the alarm will 
immediately be given. 

An alternative terminal configuration 12a' 
is illustrated in Figure 3 and primes have been 100 
added to the numerals to indicate modified 
structure. In the 2— axis scanner, the photo- 
detector array 137 of the Figure 2 device is 
replaced by a rotating prism 180 of square 
horizontal cross section and photodetector 137'. 105 
Prism 180 is mounted on shaft 182 and is driven 
by motor 130' through beveled gears 186 and 
188 or other suitable connections such as timing 
belts, pulleys and gear trains. Motor 130 # under 
the control of timing and control signal circuits 110 
1 54, synchronously drives both pivoted member 
136 and shaft 182 to control the angular move- 
ment of both vertical scanning mirror 124 and 
the rotary motion of the prism 180. As each 
face of the prism 180 rotates through the path 115 
of the light incident upon it from multi-element 
objective lens 126, the light is refracted internal 
to the prism 180 at an angle in the horizontal 
plane which varies with the angle between the 
face of the prism 180 and the incident light path 120 
direction. The light emerges from the face of 
prism 180 opposite to that through which it 
entered, again at a varying angle. As each face 
of the prism 180 rotates through approximately 
90° in the light path, the emerging light scans 125 
across the small photodetector 1 37'. Thus, in 
effect, a horizontal line or very narrow horizon- 
tal strip of the image scans across the photo- 
detector 137'. Since the output of photodetector 
1 37 is continuous, video signal processing cir- *30 
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cfuits 150*' need only amplify the signal before 
feeding it into threshold circuits 162. The 
structure and operation of terminal 12a' is other- 
wise identical to that of terminal 12a. 

Communications and Multiplexing 

The multiplexer 16 of the "central" system 
consists of conventional polling circuits and 
buffer memories and is connected to terminal 
12a by communication line 14a which can be 
either a twisted pair if distances are not too 
great (less than a few thousand feet) or telephone 
lines. It is possible to use special communications 
facilities such as the infrared data links, but 
these tend to be too expensive except in extra- 
ordinary circumstances. If the data link is a 
twisted pair, conventional integrated circuit 
driver and receiver circuits can be used, and 
these would be contained in the terminals and 
the multiplexer. 

When public telephone lines must be used, 
several choices are available, but in all cases 
conventional modems must be used between 
the telephone lines and the terminal of the 
multiplexer. 

The choices with respect to telephone lines 
have to do with whether the lines will be dial- 
up, unconditioned leased lines, or conditioned 
leased lines - in order of increasing expense of 
line and decreasing time for data transmission. 
The decision will be made primarily on the 
basis of cost of communication and the speed 
at which the data must be communicated be- 
tween the terminal and the central processor. 

The multiplexer 16 serves the function of 
allowing many terminals to share one prepro- 
cessor 20 and processor 24. The relative com- 
plexity of the multiplexer 16 depends upon the 
speed with which the whole system must react 
to the identification load it must bear. If every 
other terminal can be made to wait until the 
terminal presently being serviced by the pre- 
processor 20 and processor 24 is finished, then 
the multiplexer 16 can be quite simple. It 
would be, in effect, a switch connecting the 
first terminal requesting service into the pre- 
processor 20 and processor 24. When that 
transaction was completed it would switch in 
the next terminal in line which was requesting 
service. If higher speed operation is required of 
the system, men the multiplexer 16 may have 
to take data from every terminal requesting 
service as fast as each terminal can transmit the 
data. In this case, the data must be put in a 
buffer, and, as soon as a buffer is full, that data 
is sent to the preprocessor 20 and processor 24. 

Preprocessor 

The preprocessor is a fixed program (wired 
program) electronic digital computer comprised 
of conventional digital solid-state integrated- 
circuit elements including logical gates and 
registers. The basic function of the preprocessor 
20 is to perform a preliminary detection of 
minutiae from the fingerprint image and the 
enhancement and organization of the finger- 
print image. The preprocessor 20 accepts a 



serial data stream representative of a digitized 
(binary) video signal version of the fingerprint 
whfch the terminal generates at one bit buffer 
164 and performs tests on small areas (windows) 
of the fingerprint image to determine whether a 70 
ridge ending or bifurcation (minutiae) exists at . 
the window location and reports detections of 
tentative minutiae to the processor 24. The 
two tests performed, which are described in 
detail below, are the continuity detection logic 
which determines that a connected ridge ex- 
tends into but not through the window and the 
edge test which determines. that what extends 
into the window is a ridge and not a blob. The 
total allowable scan raster size is 128 points per 
line. Detection data provided to the processor 
24 consists of the X and Y coordinates of the 
window, a window complement bit, the con- 
tents of the window itself and area and 
perimeter measurements of the candidate 
minutiae. This data is packed into fourteen 16- 
bit words and is sent to the processor's input/ 
output bus by means of data multiplexer 232. 
Address selection for the data multiplexer 232 
is performed by processor 24. For further 
details reference should be made to our earlier 
U.K. Spe cification 1 45 28 10 . 

The preprocessor 20 can accept fingerprint 
image points and contains self-test hardware 
which allows the processor 24 to perform 
diagnostic tests to assure the correct operation 
of the system. Restrictions imposed by both 
the fingerprint terminals and the processor 24 
will reduce the processing rate of the prepro- 
cessor 20. 

As shown in Figure 4, the binary data 
stream is transmitted to preprocessor 20 via 
line 18 by multiplexer 16 (see Figure 1) and is 
received by input interface 200 which is made 
up of conventional digital electronic logic and 
register circuits. Input data selector 202 is a 
gating array made of conventional electronic 
digital logic circuits that selects the data source 
for line storage register 208 and input register 
210. Line storage register 208 which is made up 
of eleven 128-bit conventional static shift 
registers in series in an 1 1 x 128 array to pro- 
vide 1408 bits total storage and input register 
2 10 which is made up of multiple serial in/ 
parallel out shift registers to form a square 
window array .are connected to input data 
selector 202 via lines 204 and 205, respectively. 
Normally the data source selected is the finger- 
print terminal which is connected toJnput data 
selector 202 via line 20 1; however, tinder test 
conditions, the data source is the processor 24 
which is connected to input data selector 202 
via line 22, processor interface 230 and line 203, 
Selection of the data source is made through a 
switch, not illustrated, contained in the input 
data selector 202 for maintenance purposes. 
The line storage register 208 provides storage 
for the eleven previously scanned lines of the 
fingerprint and, as information from each new 
point is received, data is shifted through the 
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registers so that the 1408 most recently. read 
points (1 1 previous lines) are saved. The input 
word to the input register 210 consists of a 
current bit from the input data selector 202 fed 
5 to input register via line 205 and the outputs 
from the eleven storage registers makingoip 
line storage register 208 fed to input register 
210 via lines 206 and 209. The input register 
210 is the first element in the implementation 
10 of a 'scanning window' used to examine small 
areas of the fingerprint for possible detections 
of fingerprint minutiae. Input register 210 
consists of multiple series in/parallel out shift 
registers whose parallel output terminals at any 
15 instant of time comprise a square array of 
sample points in the. sampled fingerprint image. 
This array also includes logic which can form 
the bit-wise logical complement of the registers' 
contents upon demand. The array is loaded, 
20 twelve bits at a time; i.e. with the bit from 
data selector 202 over line 205 and with the 
1 1 bit word supplied from the line storage 
register 208 via lines 206 and 209. 

Complement logic 214 is made up of con- 
25 ventional digital electronic logic circuits and its 
purpose is to alter the contents of the input 
register 210 which are supplied via line 213 so 
that a ridge ending can be treated like a ridge 
branch or bifurcation during the subsequent 
30 minutiae detection processes. Specifically, this 
is accomplished by issuing a command via line 
21 5 to form the bit -wise complement of the 
contents of the input register 2 30 when certain 
conditions exist. The conditions regarding the 
3!> use of the complement are: (1) if either 3 or 4 
of the four center points of the array are at 
logic 1 level the window most probably con- 
tains a valley, or possibly a bifurcation, and 
the array is not complemented; (2) if either 3 or 
^ 4 of the four center points of the array are at a 
logic 0 level the window most probably con- 
tains a ridge, or possibly a ridge ending, the 
array is complemented; and (3) if exactly 2 of 
the four center points of the array are at a 
[5 logic 0 level the window probably contains a 
boundary line of a ridge arid a valley, or a 
smudged area of the print, and the array is 
complemented only if the previous window 
was not complemented. Any array that has 
0 been complemented is re-complemented before 
the next data bit from the terminal is accepted. 
A flag signal is sent to the data multiplexer 232 
via line 2 1 6 each time a window is comple- 
mented. 

5 Continuity logic 220 is made up of a parallel 
array of conventional digital electronic logic 
circuits and its purpose is to eliminate, during 
each cycle of its operation, all points of the 
image which are contained within the 12 x 12 
window (array) area that are not connected by 
at least one continuous string of binary image 
points of logical value "P* to the center four 
points of the window. These center four points 
are transferred directly to the output register 
222 via line 2 1 8. The purpose for this is to 



eliminate adjacent ridge structure which would 
tend to obscure detection of candidate 
minutiae. The continuity logic 220 operates on 
the image (or complement of the image) con- 
tained in the input register 2 10. The modified 70 
image is transferred via line 22 1 to the output 
register 222 which provides storage of the 
binary image point data in the 12 x 12 window 
area as modified by the continuity logic 220. 
The output register 222 consists of twelve 12- 75 
bit parallel in/parallel out registers arranged in a 
12x12 array and is connected to detection 
logic 224 and data multiplexer 232 via lines 
223 and 23 1 . respectively. 

Detection logic 224 is made up of digital 80 
electronic logic circuits arranged as conven- 
tional counters, registers, adders and gates, the 
function of which is to perform tests on each 
window contained in the output register 222 to 
determine the presence of a possible minutiae. 85 
The criteria that a window must meet to be 
considered as containing a potential minutiae 
are that: (1) the ridge must not pass com- 
pletely through the window; and (2) it must 
not intersect more than a maximum allowable 90 
number of resolution elements along the 
window edge, depending upon its orientation 
in the window. Windows that meet the above 
criteria cause the detection logic 224 to gener- 
ate an acceptance signal to the window pass 95 
control logic 226 via line 225. 

Window pass control logic 226 is made up of 
conventional digital electronic gate circuits and 
its function is to produce a signal which is trans- 
mitted via line 227 to processor interface 230 100 
when a potential minutiae detection takes 
place. Certain other criteria must be met be- 
fore a report is made to the computer or pro- 
cessor 24. The criteria are: (1) no reports can 
be made during the first 1 1 lines of the finger- 105 
print (line lockout); and (2) ho reports can be 
made during the first 1 1 points of a line (point 
lockout). Windows passing the detection logic 
test and meeting the above criteria will cause 
the window pass control logic 226 to generate a 110 
flag signal to the processor interface 230. 

Data multiplexer 232 is made up of digital 
electronic logic circuits in a conventional multi- 
plexer configuration and its purpose is to access 
data at particular points in the preprocessor 20 1 15 
for transfer to the computer or processor 24. 
Data multiplexer 232 can access a selected 
fixed number of multiple-bit words and the 
address selection for data multiplexer 232 is 
performed by the processor 24, through line 22, .20 
interface 230, line 235, multiplexer address 
register 236 which is a conventional digital 
electronic register and line 237. Data from the 
data multiplexer 232 is passed via line 239, 
processor interface 230 and line 22 to the pro- 25 
cessor 24. 

All system timing is derived from a con- 
ventional^ phase electronic clock circuit 252 
which includes a crystal-controlled oscillator 
circuit operating at a selected, fixed frequency. 30 



Clock cirouit 252 is connected to input inter- 
face 200 via line 25 1 and supplies a control 
signal to X coordinate counter 242 via line 253. 
Receipt of a timing signal from the terminal at 
5 the "local" station initiates the processing cycle. 
Since system timing is slaved to the terminal 
data clock circuit 252, no restriction is placed 
in the data clock rate other than that it must 
not occur faster than the processing rate of the 
10 preprocessor 20 and that exactly 16,384 pulses 
must occur for each scan of a fingerprint. 
Detection of an end-of-print signal disables the 
preprocessor 20 and enabling occurs by a 
command from the processor 24. 
15 X and Y coordinate counters 242 and 244 
are made up of conventional digital electronic 
counter circuits whose purpose is to indicate 
the X and Y coordinates of the point being 
processed during the scan of the fingerprint. 
20 The X-counter 242 is 7 bits long and counts 
128 positions along a line. The Y-counter 244 
which is 7 bits long and counts 128 lines is 
connected to X-counter 242 via line 243 and 
thereby to clock circuit 252. Full count of both 
25 the X and Y counters 242 and 244 will gener- 
ate an endof-print flag to processor 24 via 
lines 246 and 248, respectively, data multi- 
plexer 232, line 239, processor interface 230 
and line 22. 

30 The processor interface 230 which is made 
up of conventional digital electronic logic cir- 
cuits arranged as gates is not physically a part 
of the preprocessor 20. The function of tnter- 
face 230 is to provide processor control of the 

35 preprocessor 20 and to facilitate transfers of 
data to and from the processor 24. Processor 
interface 230 generates a start signal to enable 
the preprocessor 20. As preprocessor 20 detects 
candidate minutiae it signals the processor 24 

440 which then addresses the data multiplexer 232 
and reads the detection parameters. 

In the test mode, processor 24 generates test 
patterns via line 22 and through the processor 
interface 230 which supplies them to input 

45 data selector 202 via line 203. Preprocessor 20 
operates on the test patterns and the results are 
read back through processor interface 230 for 
analysis by the processor 24. A determination 
of proper operation of the preprocessor can 

50 then be made. 

Central Processor 

The processor 24 is a conventional miniature 
digital computer having suitable capability for 
high-speed processing of digital sampled data 
and control of external devices and performs 
the following programmed functions: (1) 
perform more stringent tests upon the minutiae 
sent by the preprocessor 20 to eliminate any 
duplicate minutia detections or any non- 
minutiae passed by the preprocessor 20; (2) 
eliminate false minutiae caused by scars, creases, 
breaks in ridges due to a poor image or pores, 
and edge effects; (3) determine the minutia 
65 angle; (4) send the alleged identity label data to 
the data store 26 and therefore receive a 



corresponding set of minutiae data from the 
data store 26; (5) match the minutiae sent by 
terminal via the multiplexer 1 6 and prepro- 
cessor 20 with the minutiae retrieved from the 
data store 26 associated with the identity label 70 
sent by the terminal; (6) if the match test 
verifies the identity, determine if other con- 
ditions preclude positive action; (7) if all con- 
ditions are favorable send the action signal to 
the requesting terminal; (8) send an alarm if 75 
conditions warrant; (9) log the identity verifi- 
cation request; (10) adaptively improve the 
reference minutia list for each identity when- 
ever an identity is verified; (1 1) perform self 
tests to determine that the system is functioning 80 
correctly; and (12) perform other utility 
functions such as computing the new balance of 
a subscriber who has used his credit for some 
reason or compute the number of voters voting 
for and against some measure. 85 
Data Store 

The data store 26 consists of a conventional 
direct-access storage device such as a magnetic 
: disk memory device as is conventional in the 
electronic data processing art. It also includes 90 
conventional timing and control circuits which 
cause synchronous transfer of data from the 
store to processor 24 when a command is 
issued from the processor 24. 

The specific details of the embodiments of 95 
the present invention will depend upon the 
specific application for which it is intended. 
Factors which will influence the ultimate 
choice of a system for a specific application 
will include the number of terminals, the lo- 100 
cation (near or remote) of the terminals, the 
types of terminals (such as those controlling 
entry of more secure areas), the number of 
persons to be permitted entry, the rate of 
entry, the data to be recorded (time clock, 105 
service usage, fingerprint data of person seeking 
unauthorized entry, etc.), the acceptable 
probability of denying access to authorized 
persons, the acceptable probability of permit- 
ting access by unauthorized persons, etc. While 110 
the ultimate solution will depend upon the 
parameters dictated by the specific use, the 
principles applied in formulating the specific 
electronic circuits making up the described 
components will be those that are .conventional ^ 5 
in the art as exemplified by the standard 
references "Arithmetic Operations in Digital 
Computers" by R. K. Richards, "Digital Cir- 
cuits and Devices" by Teuvo Kohonen and 
"The Design of Digital Systems" by John B. 120 
Peatman, "Integrated Circuits in Digital Elec- 
tronics" by Arpad Barna and Dan I. Porat, 
"Multiprocessors and Parallel Processing" 
edited by Philiph H. Enslow, Jr., and "Design 
of Digital Computers" by Hans W. Gschwind 125 
and Edward J. McCluskey. 

Although preferred embodiments of the 
present invention have been illustrated and 
described, other changes will occur to those 
skilled in the art. For example, additional in- 130 



data and minutiae data to and removing 
identity data and minutiae data from said data 
store. 

1 1 . A fingerprint identification system 
capable of converting ridge-valley patterns of a 
fingerprint into electronic binary signals for 
image processing substantially as hereinbefore 
described with respect to the accompanying 
drawings. 
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dfcators may be employed in the terminals and 
the identification number may be on a card 
which is inserted into the terminal. The area 
and resolution of scanning may change to 
5 match the specific accuracy requirements of a 
given application. Additional information may 
be required to be keyed in by a terminal user 
to either expedite a more complex transaction 
or to further establish the nature of his access 
10 objective. Other conventional methods may be 
used for implementing a 2 -dimensional raster 
scan of the fingerprint image area such as the 
use of a 2-dimensional electro-optical sensor, 
array. Two synchronous or directly coupled 
15 motors may be used in place of belt and gear 
drives. Also, the entire unit can be self con- 
tained for appropriate uses. It is therefore in- 
tended that the scope of the present invention 
is to be limited only by the scope of the 
20 appended claims. 

The data processor described above is also 
described and claimed in our divisional ap- 
plication 27155/78 (Serial No. 1548668) to 
which attention is directed. 

25 WHAT WE CLAIM IS:- 

I. A fingerprint identification system 
capable of converting ridge-valley patterns of a 
fingerprint into electronic binary signals for 
image processing by locating and extracting 

30 distinctive minutiae or characteristics of a 

fingerprint, characterized by terminal means at 
a "local" station supplying identification data 
relevant to an individual to be identified and 
sensing and converting a fingerprint pattern at 

35 a "local" station into said electronic binary 
signals for transmission of such signals to a 
multiplexer at a "central" station and for 
receipt of data from said multiplexer, and a 
data processor at the "central" station 

**0 operatively connected to said multiplexer to 
receive therefrom and to transmit thereto, and 
thereby to said terminal means via said tele- 
communication means, data pertinent to the 
identification of an individual, said processor 

45 being associated for this purpose with a data 
store which stores identity and minutiae data 
for different individuals, said processor ex- 
tracting minutiae from the binary signals sup- 
plied by said terminal means and matching the 

50 extracted minutiae and identification data 
supplied by the terminal means with identity 
and minutiae data stored in said data store to 
determine whether the identity is confirmed 
and for transmitting, by way of said multi- 

55 plexer, the determination to said terminal 
means, said identity determination being 
effected as a function of a single scan of the 
fingerprint pattern by scanning means forming 
part of the terminal means. 

60 2. A system according to claim 1 , wherein 
said data processor is operatively connected to 
a data preprocessor which extracts tentative 
minutiae from data supplied by the terminal 
means, said data processor acting on said 

65 tentative minutiae. 



3. A system according to claim 1 or 2, 
wherein the terminal means includes a prism 
having one face contacted by a finger the print 
of which is to be compared with data in said 
data store and further including photodetector 70 
means producing an electrical output pro- 
portional to the light projected thereon by 
suitable light projecting means operatively re- 
lated to said prism, means being provided to 
move the image of the fingerprint of the 75 
person to be identified across said photo- 
detector means. 

" 4. A system according to claim 3, wherein 
said terminal means further includes video 
signal processing circuits processing the elec- 80 
trical output of said photodetector means and 
timing and control signal circuits synchronizing 
said means for moving an image and said video 
signal processing circuits. 

5. A system according to claim 3. or 4, 85 
wherein said photodetector means is a hori- 
zontally extending array. 

6. A system according to any one of claims 
3 to 5, wherein said means projecting an image 

of a fingerprint includes a rotating prism. 90 

7. A system according to any one of claims 
2 to 6, wherein said data preprocessor com- 
prises an input data selector and a line storage 
register receiving from said terminal means by 
way of said multiplexer a serial, binary data 95 
stream representative of a digitized fingerprint 
image, an input register fed by signals from 

said input data selector and said line storage 
register performing tests on predetermined 
areas of said digitized fingerprint image de- 100 
fining windows to determine the presence of 
minutiae at the window locations, a comple- 
ment logic device connected to said input 
register providing window complements, and 
X-counter and Y-counter means synchronized 105 
to said binary data stream for transmitting X 
and Y coordinates of said windows, window 
complement bits and the contents of said 
window bits, by way of an output register 
operatively connected to the input register, to 110 
said data processor. 

8. A system according to any one of the 
preceding claims, wherein said terminal means 
includes a message coder/decoder connected 

by way of said multiplexer to said data pro- 115 
cessor for supply thereto and for receipt there- 
from of identity processing signals, said message 
coder-decoder being operatively connected 
with a relay closure activator for providing a 
suitable action signal at the end of a fingerprint 120 
scan. 

9. A system according to any one of the 
preceding claims, wherein said terminal means 
includes a plurality of terminals and wherein 

said multiplexer provides communication be- 125 
tween a single terminal and the data processor 
at any given time. 

10. The system according to any one of the 
preceding claims, wherein a keyboard is con- 
nected to said data processor for adding identity 1 30 
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